PT-2026-1221 · Quanta Computer · Qoca Aim Ai Medical Cloud Platform

Published 2026-01-05 · Updated 2026-01-05 · CVE-2025-15235

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions QOCA aim AI Medical Cloud Platform (affected versions not specified)

Description A Missing Authorization issue exists in QOCA aim AI Medical Cloud Platform. Authenticated remote attackers can modify network packet parameters, potentially allowing access to other users' files. The platform is developed by Quanta Computer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-15235

Affected Products

Qoca Aim Ai Medical Cloud Platform

References · 7

• https://osv.dev/vulnerability/CVE-2025-15235 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-15235 · Security Note
• https://twcert.org.tw/en/cp-139-10616-cd942-2.html · Note
• https://t.me/cveNotify/147687 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2008141322981429386 · Twitter Post
• https://twitter.com/CVEnew/status/2008081984245870892 · Twitter Post
• https://twcert.org.tw/tw/cp-132-10615-157a3-1.html · Note